2026-06-26, 09:39 PM
I caught something out of the ordinary (for me)
It shows that i have authenticated and it display my public ipv4 IP.
It shows that i have authenticated and it display my public ipv4 IP.
|
2026-06-26, 09:39 PM
I caught something out of the ordinary (for me)
It shows that i have authenticated and it display my public ipv4 IP.
2026-06-26, 09:45 PM
(2026-06-26, 09:38 PM)TheDreadPirate Wrote: If it worked when it was on the same vlan/subnet, is it something with your unifi setup? I'm assuming this is referring to Ubiquiti. Previously i had mikrotik and no vlans and same subnets. Recently got into Ubiquiti. also reinstalled my server(s) around the same time. In the settings i allow "clients" vlan to access "media" vlan, allowing return traffic. My user library view works really fine, i can login, and start playing videos instantly. Only admin pages that wont allow access for most stuff
2026-06-27, 01:25 AM
(2026-06-26, 09:39 PM)Squid Wrote: I caught something out of the ordinary (for me) Do you have NAT loop back setup? You can also setup custom DNS entries in your router so that your domain resolves to the LAN IP for clients on your LAN.
2026-06-27, 08:41 AM
(This post was last modified: 2026-06-27, 11:38 AM by Squid. Edited 2 times in total.)
(2026-06-27, 01:25 AM)TheDreadPirate Wrote:(2026-06-26, 09:39 PM)Squid Wrote: I caught something out of the ordinary (for me) I sorta figured out my real problems. 1) I had to use split dns on my ubi router and set jf to lan ip for the vlan interface allowed to access it. 2) Disable brave browser "secure dns" which bypasses lan dns servers Now Jf sees my lan ip and not public static ipv4. so ill go ahead and mark your first post as solution for most of my problems that solved basically most my problems.
2026-06-27, 07:40 PM
A bit off topic, on my router (running OpenWRT) I have it setup to block all avenues for clients to bypass the router's DNS, which is running AdguardHome. Since some devices have hard coded DNS, this also involved IP block lists.
This resolved some issues I had with devices still getting ads, phoning home, or not picking up the LAN DNS entries for my local services. Does Ubiquiti have a similar function?
2026-06-27, 08:43 PM
(2026-06-27, 07:40 PM)TheDreadPirate Wrote: A bit off topic, on my router (running OpenWRT) I have it setup to block all avenues for clients to bypass the router's DNS, which is running AdguardHome. Since some devices have hard coded DNS, this also involved IP block lists. i believe you can redirect all port 53 requests to chosen dns servers at the router. But for my case, split dns works.
2026-06-27, 09:20 PM
You have to redirect both port 53 (unencrypted DNS) and 853 for DoT (DNS-over-TLS). For DoH (DNS-over-HTTPS), that is where IP block lists come in since that occurs on port 443 along with plain HTTPS traffic.
But if it is currently working, best not mess with it. |
|
|
|
|